-
The Superset Trap: Why Node’s Native TypeScript is Going to Break Enterprise Brains
If you spend your time in open-source mailing lists or arguing about AST transformations on social media, the recent push toward “erasable syntax” makes total sense. I’ve been a proponent of TypeScript for a long time. In the early days, whenever someone brought up enum, for example, I remember having conversations along the lines of:…
-
Governing the Generative Drift: Why We Need the Assumptions & Constraints Manifest (ACM)
A couple of weeks ago, I talked about the “Happy Path Trap”—how LLMs create massive Day 1 velocity while burying teams in silent Day 2 architectural debt. During that discussion, I pitched an idea: What if we required an Assumptions & Constraints Manifest (ACM) in every AI-assisted PR to make hidden trade-offs visible? Since I’m…
-
Weekly Web Dev Quick Hits
A couple quick hits while I rev the content engine back up over here! CSS Weaponized at Black Hat 2026: Security researcher Gareth Heyes dropped a research paper showing how CSS alone can break out of webmail sanitizers. Without a single line of JavaScript, malicious stylesheets in Gmail and Outlook were manipulated to spoof UI…
-
H5BP As an Open Source Incubator
I’m looking at the future of the HTML5 Boilerplate (H5BP) organization and repos right now and, in addition to formulating plans for the existing projects, I’ve decided to try something new. Maintenance of the existing projects is vital, but passive stewardship isn’t enough for where I’m at right now. The web changes too quickly. AI…
-
The Mastra Poisoning and the Yin/Yang of Ecosystem Velocity
The modern JavaScript ecosystem is incredible. If you need a utility, library or framework for anything it’s probably out there in the npm registry. Things that used to take us a week are now available as a simple `npm install.` But last week, the ecosystem reminded us of the exact tax we pay for that…